UAMALLOWED and HTTPS (to select.worldpay.com)

[Johan Meiring]

Derek C wrote:
> Hi Johan,
> 
> Below is the output of "tcpdump -vvntttt -i ath0 dst 155.136.66.34" (where
> that IP is select.worldpay.com).
> 

Your filter is of such a nature that you will only see outgoing traffic.

tcpdump -vvntttt -i ath0 host 155.136.66.34
                          ^^^^
is better.

Also you are filtering other traffic.

Best to use:
tcpdump -vvntttt -s 1500 -i ath0
(-s 1500 makes it capture the whole packet, and you then get more info)

If you feel the output is too long, use something like pastebin.com


-- 


Johan Meiring
Amobia Communications
Tel: (0861) AMOBIA / (0861) 266242
Fax: (0861) AMOFAX / (0861) 266329